Skip to content
OpenAdvisories

Package · npm

libp2p-secio

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.1
    GHSA-rch7-f4h5-x9rj

    Identity Spoofing in libp2p-secio

    Affected versions of `libp2p-secio` does not correctly verify that the `PeerId` of `DstPeer` matches the `PeerId` discovered in the crypto handshake, resulting in a high severity identity spoofing vulnerability. ## Recommendation Update to version 0.9.0 or la…

    libp2p-secio npm